DahuaConsole toolkit shell-out after Dahua auth bypass
Detects the execution of DahuaConsole processes that are spawned by or associated with the scannerdahua utility. This pattern is often associated with discovery or exploitation activities targeting Dahua devices.
Splunk (SPL)
